A Nigerian couple, Luciana and Femi Akanbi, have been jailed in the United Kingdom for orchestrating a large-scale tax refund fraud that exploited a major data breach at Transport for London and cost the public purse more than £433,000.

Woolwich Crown Court heard that Luciana Akanbi, 38, abused her position in Transport for London’s human resources department to access the personal records of 107 employees. Investigators said sensitive data, including passport details, National Insurance numbers and bank information, was harvested and used to submit 139 bogus self-assessment tax refund claims to HM Revenue and Customs.

Prosecutors told the court that the fraud ran for several months and was enabled by at least 38 electronic devices used from the couple’s home and other locations. While the total value of claims approached £650,000, the confirmed loss to HMRC was put at just over £433,000.

Judge David Miller described the case as Transport for London’s worst ever data breach, noting that the authority was forced to overhaul its systems and that staff morale and performance were hit as employees grappled with the fallout.

The court was told that the proceeds were rapidly laundered through a complex network of accounts, frustrating efforts to recover the money. Around £66,000 was traced directly to Femi’s bank account and £16,000 to Luciana’s, though the judge ruled that their overall benefit from the scheme was significantly higher. More than £50,000 of the stolen funds was paid into gambling accounts, linked to Femi’s reported gambling addiction and financial pressures following illness during the COVID-19 pandemic.

Prosecutor Andrew Evans said the operation was sophisticated, required extensive planning and involved a large number of victims whose financial lives were disrupted. Some employees faced damaged credit ratings and had to untangle their affairs with HMRC after discovering claims made in their names.

The court heard that Luciana initially tried to deflect blame by suggesting a relative in the IT sector might have been responsible, but Judge Miller found both defendants to be central to the conspiracy, stressing that the fraud was only possible because of the trust placed in her as an HR employee.

No compensation order was made because the couple were found to have no recoverable assets. Following sentencing, Transport for London said it had strengthened internal data protection measures, while HMRC warned it would continue to pursue those who attempt to exploit the tax system. The couple may face deportation proceedings after serving their prison terms.